registry / @oxiaom/adoremix / 1.0.71

@oxiaom/adoremix@1.0.71

⚠ Under review

AdoreMix broadcast server - cross-platform installer, runner and service manager

AI Security Review

scanned 14h ago · by lpm-firewall-ai

The inspected lifecycle hook only prints setup guidance, and the flagged runtime excerpts do not show attack behavior. The bundled Audio8 archive could not be reviewed, so the package cannot be cleared as clean on this evidence.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The package postinstall hook runs; the Audio8 archive is used only through the separate Audio8 installation flow.

Impact

No attack impact was established from inspected source; the archive’s contents remain unverified.

Mechanism

The postinstall hook prints guidance. The Audio8 installer extracts the bundled archive into its runtime directory, but the archive contents were unreadable in this review.

AI rationale

Evidence

audio8-assets/audio8-tts.tgz

Decision evidence

public snapshot

AI called this Manual Review at 71.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json runs a postinstall hint script; that script prints setup guidance, while the CLI install is a separate user command.
The installer copies a platform-specific native resource into the selected work directory and installs helper dependencies when the user invokes the install command.
The Audio8 provider uses a bundled archive as an install source, but the archive could not be inspected because it is binary and exceeds the citation verifier’s size limit.

Evidence against

The inspected postinstall script contains only informational logging; no attack behavior was established in it.
The cited web UI excerpts are Axios cancellation and asset-loading code, not evidence of a package attack.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

23 flagged

package.jsonView file

•scripts.postinstall = node ./bin/postinstall-hint.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

tts/providers/edge.jsView file

11L12: const { execFileSync } = require('child_process'); L13: const fs = require('fs');

High

Child Process

Package source references child process execution.

tts/providers/edge.jsView on unpkg · L11

tts/providers/audio8.jsView file

492try { L493: execSync(`systemctl --now disable ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' }); L494: execSync(`systemctl stop ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' }); ... L507: opts = opts || {}; L508: const baseUrl = opts.url || process.env.ADOREMIX_AUDIO8_BASE_URL || `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`; L509: try {

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

tts/providers/audio8.jsView on unpkg · L492

•Trigger-reachable chain: manifest.main -> src/index.js -> src/cli.js -> tts/providers/audio8.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

tts/providers/audio8.jsView on unpkg

216const home = (function(){ L217: try { return execSync('/bin/bash -c "echo $HOME"', { shell: '/bin/bash', stdio: 'pipe', encoding: 'utf8' }).trim() || '/root'; } L218: catch (e) { return '/root'; }

High

Shell

Package source references shell execution.

tts/providers/audio8.jsView on unpkg · L216

21Trigger-reachable persistence chain: manifest.main -> src/index.js -> src/cli.js -> tts/providers/audio8.js L21: L22: const { execFileSync, execSync, execFile } = require('child_process'); L23: const fs = require('fs'); ... L25: const os = require('os'); L26: const https = require('https'); L27: const http = require('http'); ... L92: ['-y', '-loglevel', 'error', '-i', wavFile, '-codec:a', 'libmp3lame', '-qscale:a', '4', mp3File], L93: (err, stdout, stderr) => { L94: if (err) return reject(new Error('ffmpeg WAV→MP3 转码失败: ' + String(stderr || err.message).split('\n')[0])); ... L161: }); L162: req.write(postData); L163: req.end();

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

tts/providers/audio8.jsView on unpkg · L21

21L22: const { execFileSync, execSync, execFile } = require('child_process'); L23: const fs = require('fs'); ... L25: const os = require('os'); L26: const https = require('https'); L27: const http = require('http'); ... L92: ['-y', '-loglevel', 'error', '-i', wavFile, '-codec:a', 'libmp3lame', '-qscale:a', '4', mp3File], L93: (err, stdout, stderr) => { L94: if (err) return reject(new Error('ffmpeg WAV→MP3 转码失败: ' + String(stderr || err.message).split('\n')[0])); ... L161: }); L162: req.write(postData); L163: req.end();

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

tts/providers/audio8.jsView on unpkg · L21

bin/postinstall-hint.jsView file

2L3: const logger = require('../src/logger'); L4:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/postinstall-hint.jsView on unpkg · L2

src/mp3server.jsView file

100try { L101: execSync('npm install --no-save node-windows', { cwd: workdir, stdio: 'inherit' }); L102: } catch (e) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/mp3server.jsView on unpkg · L100

config-manager/app.pyView file

•path = config-manager/app.py kind = build_helper sizeBytes = 22302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

config-manager/app.pyView on unpkg

audio8-assets/audio8-tts.tgzView file

•path = audio8-assets/audio8-tts.tgz kind = high_entropy_blob sizeBytes = 32250555 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

audio8-assets/audio8-tts.tgzView on unpkg

•path = audio8-assets/audio8-tts.tgz kind = compressed_blob sizeBytes = 32250555 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

audio8-assets/audio8-tts.tgzView on unpkg

•path = audio8-assets/audio8-tts.tgz kind = nested_archive_needs_inspection sizeBytes = 32250555 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

audio8-assets/audio8-tts.tgzView on unpkg

src/install.jsView file

•matchType = normalized_sha256 matchedPackage = @oxiaom/adoremix@1.0.41 matchedPath = src/install.js matchedIdentity = npm:QG94aWFvbS9hZG9yZW1peA:1.0.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High